CVE-2023-54143

media: mediatek: vcodec: fix resource leaks in vdec_msg_queue_init()

published December 24, 2025

CVSS
—
EPSS
0%
Percentile
9.2
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

media: mediatek: vcodec: fix resource leaks in vdec_msg_queue_init()

If we encounter any error in the vdec_msg_queue_init() then we need

to set "msg_queue->wdma_addr.size = 0;". Normally, this is done

inside the vdec_msg_queue_deinit() function. However, if the

first call to allocate &msg_queue->wdma_addr fails, then the

vdec_msg_queue_deinit() function is a no-op. For that situation, just

set the size to zero explicitly and return.

There were two other error paths which did not clean up before returning.

Change those error paths to goto mem_alloc_err.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00199 · 9.2th percentile
Published
2025-12-24T13:06Z
EPSS history
Timeline
  • 24 DEC 13:06Z
    media: mediatek: vcodec: fix resource leaks in vdec_msg_queue_init()
    cvelistv5